Question

Your organization wants to reduce standing administrative access. Several IT staff need the Exchange Administrator role only occasionally, and you must ensure they request and activate the role for a limited time, with approval and justification required each time. Which Microsoft Entra feature should you implement?

Accepted Answer

Configure Privileged Identity Management (PIM) for eligible role assignments

Answer

Assign the Exchange Administrator role permanently and monitor activity with audit logs

Answer

Create a conditional access policy that requires MFA for the Exchange Administrator role

Answer

Add the users to a security group and apply an Identity Secure Score recommendation